summaryrefslogtreecommitdiff
path: root/librpc/idl
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2010-08-26 16:04:53 +1000
committerAndrew Bartlett <abartlet@samba.org>2010-09-11 18:46:04 +1000
commitd2883ffde92b60c57466146975a3a279b5826c89 (patch)
tree06ef1e027584d83791628746ed06b10446b3f8ad /librpc/idl
parent86233ec13527ad93ef3add7d24bd8f781693f2b0 (diff)
downloadsamba-d2883ffde92b60c57466146975a3a279b5826c89.tar.gz
samba-d2883ffde92b60c57466146975a3a279b5826c89.tar.bz2
samba-d2883ffde92b60c57466146975a3a279b5826c89.zip
security.idl clarify which privilages are LUID and bitmap values
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Diffstat (limited to 'librpc/idl')
-rw-r--r--librpc/idl/security.idl16
1 files changed, 10 insertions, 6 deletions
diff --git a/librpc/idl/security.idl b/librpc/idl/security.idl
index 922b264df9..59d3f5c143 100644
--- a/librpc/idl/security.idl
+++ b/librpc/idl/security.idl
@@ -352,9 +352,11 @@ interface security
********************************************************************/
-/* we have to define the LUID here due to a horrible check by printmig.exe
- that requires the SeBackupPrivilege match what is in Windows. So match
- those that we implement and start Samba privileges at 0x1001 */
+ /* LUID values for privileges known about by Samba (bottom 32 bit of enum, top bits are 0) */
+
+ /* we have to define the LUID here due to a horrible check by printmig.exe
+ that requires the SeBackupPrivilege match what is in Windows. So match
+ those that we implement and start Samba privileges at 0x1001 */
typedef enum {
SEC_PRIV_INCREASE_QUOTA = 0x5,
@@ -389,9 +391,11 @@ interface security
SEC_PRIV_REMOTE_INTERACTIVE_LOGON = 0x2024
} sec_privilege;
-/*
- * We will use our own bitmap here as the Samba3 privilages.tdb records these values
- */
+
+ /* Bitmap of privilege values for internal use only. We need
+ * our own bitmap here as privilages.tdb records these values
+ * as a bitmap (privilages.ldb uses the string forms).
+ */
typedef [bitmap64bit] bitmap {
SE_NETWORK_LOGON = 0x00000001,
SE_INTERACTIVE_LOGON = 0x00000002,